CVEvulnerability
CVE-2010-5283
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-11-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers to hijack the authentication of administrators for requests that change folder and resource permissions.
Affected configurations
• opentext livelink ecm 9.7.1
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0359.html Exploit
- http://packetstormsecurity.org/1009-exploits/opentext-xsrfxss.txt packetstormsecurity.org
- http://secunia.com/advisories/41553 Vendor Advisory
- http://www.osvdb.org/68255 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62057 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0359.html Exploit
- http://packetstormsecurity.org/1009-exploits/opentext-xsrfxss.txt packetstormsecurity.org
- http://secunia.com/advisories/41553 Vendor Advisory
- http://www.osvdb.org/68255 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62057 exchange.xforce.ibmcloud.com